# Elasticsearch **URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1791 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1792 --- ## [How to filter unique value in REST API](https://discuss.elastic.co/t/how-to-filter-unique-value-in-rest-api/119573)
**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\ **Replies:** 0\ **Last updated:** [February 13, 2018, 4:18am UTC](https://discuss.elastic.co/t/how-to-filter-unique-value-in-rest-api/119573 "2018-02-13T04:18:03Z")
I want to filter unique IP regardless it's in DST\_Local\_IP or in SRC\_Local\_IP. this is my REST API: GET /\_search { "size" : 0, "query": { "bool": { "should": \[ { "match":{"IPV4\_DST\_A… --- ## [Multi Index Search - Multiple Queries within the query](https://discuss.elastic.co/t/multi-index-search-multiple-queries-within-the-query/119564)
**Author:** [@whittssg](https://discuss.elastic.co/u/whittssg)\ **Replies:** 4\ **Last updated:** [February 13, 2018, 4:00am UTC](https://discuss.elastic.co/t/multi-index-search-multiple-queries-within-the-query/119564 "2018-02-13T04:00:32Z")
Hello, I was wondering if there was a way to do one call with multiple indexes but also have individual queries for each index? Currently i am specifying all of my indexes that i need above the body \> index:\[index1, in… --- ## [Suggester doesn't suggest](https://discuss.elastic.co/t/suggester-doesnt-suggest/119570)
**Author:** [@panfng](https://discuss.elastic.co/u/panfng)\ **Replies:** 0\ **Last updated:** [February 13, 2018, 3:39am UTC](https://discuss.elastic.co/t/suggester-doesnt-suggest/119570 "2018-02-13T03:39:57Z")
I'm using a phrase suggester to implement "did you mean" feature. For text "civenchy", it will suggest "givenchy". But for text "chivenchy" it doesn't return any suggestion. Note that both "civenchy" and "chivenchy" do… --- ## [LDAPBindException/SSLHandshakeException setting Active Directory User Authentication](https://discuss.elastic.co/t/ldapbindexception-sslhandshakeexception-setting-active-directory-user-authentication/119325)
**Author:** [@jfreeman](https://discuss.elastic.co/u/jfreeman)\ **Replies:** 7\ **Last updated:** [February 13, 2018, 1:58am UTC](https://discuss.elastic.co/t/ldapbindexception-sslhandshakeexception-setting-active-directory-user-authentication/119325 "2018-02-13T01:58:28Z")
Hi, I am trying to setup AD user authentication with Elasticsearch 6.0 installed on Windows Server 2016. Any ideas how to solve this issue? The configuration in elasticsearch.yml file is xpack: security: authc: rea… --- ## [Filter children in elasticsearch (using NEST)](https://discuss.elastic.co/t/filter-children-in-elasticsearch-using-nest/119442)
**Author:** [@Qutaiba\_Mustafa](https://discuss.elastic.co/u/Qutaiba_Mustafa)\ **Replies:** 1\ **Last updated:** [February 13, 2018, 12:31am UTC](https://discuss.elastic.co/t/filter-children-in-elasticsearch-using-nest/119442 "2018-02-13T00:31:09Z")
I want to filter children in elastic search without changing the parent node, i have something like this data, and want to all games, but only "isVisible = true" members should appear with each game { "\_index": "tes… --- ## [Role has manage\_index\_templates, but getting error "action \[indices:admin/mappings/get\] is unauthorized for user"](https://discuss.elastic.co/t/role-has-manage-index-templates-but-getting-error-action-indices-admin-mappings-get-is-unauthorized-for-user/118391)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 8:42pm UTC](https://discuss.elastic.co/t/role-has-manage-index-templates-but-getting-error-action-indices-admin-mappings-get-is-unauthorized-for-user/118391 "2018-02-12T20:42:46Z")
Hi. I'm creating a second Kibana on hosted elasticsearch (cloud.elastic.co). The second kibana role has "all" privilege on her .kibana\_2 index, and cluster privileges "monitor" and "manage\_index\_templates". Still, she ge… --- ## [Completion Suggester with the Slop parameter](https://discuss.elastic.co/t/completion-suggester-with-the-slop-parameter/119542)
**Author:** [@tallosan](https://discuss.elastic.co/u/tallosan)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 7:38pm UTC](https://discuss.elastic.co/t/completion-suggester-with-the-slop-parameter/119542 "2018-02-12T19:38:06Z")
How can I use the slop parameter, or achieve the same functionality, with the Completion Suggester? An example use for this is if a User is typing the query "Quick fox", and I have the document "Quick Brown Fox", I want… --- ## [Bool search with MUST for nested, nested string](https://discuss.elastic.co/t/bool-search-with-must-for-nested-nested-string/119532)
**Author:** [@YeeP](https://discuss.elastic.co/u/YeeP)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 6:28pm UTC](https://discuss.elastic.co/t/bool-search-with-must-for-nested-nested-string/119532 "2018-02-12T18:28:03Z")
Here is a example of what I am trying to run, the last query is the one in question GET sev\_incidents/\_search { "query": { "bool": { "must": \[ { "query\_string": { "q… --- ## [Cross-Cluster document deletes](https://discuss.elastic.co/t/cross-cluster-document-deletes/119106)
**Author:** [@gansvv](https://discuss.elastic.co/u/gansvv)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 6:20pm UTC](https://discuss.elastic.co/t/cross-cluster-document-deletes/119106 "2018-02-12T18:20:53Z")
I have multiple ES clusters indexing data and cross-cluster search helps to retrieve documents from all clusters. Now, I would like to delete a few documents and need to delete from multiple clusters. However I get the f… --- ## [High-level REST client automatic connection repair](https://discuss.elastic.co/t/high-level-rest-client-automatic-connection-repair/118740)
**Author:** [@elastinoob](https://discuss.elastic.co/u/elastinoob)\ **Replies:** 4\ **Last updated:** [February 12, 2018, 6:18pm UTC](https://discuss.elastic.co/t/high-level-rest-client-automatic-connection-repair/118740 "2018-02-12T18:18:31Z")
We currently use the JEST 5.2 client. We recently experienced a networking issue where, after recovery, an invalid HTTP route was held by the client connection manager instead of finding a new valid route to the ES clus… --- ## [Query with aggregation and return single field in each bucket](https://discuss.elastic.co/t/query-with-aggregation-and-return-single-field-in-each-bucket/119528)
**Author:** [@seanwang30](https://discuss.elastic.co/u/seanwang30)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 5:56pm UTC](https://discuss.elastic.co/t/query-with-aggregation-and-return-single-field-in-each-bucket/119528 "2018-02-12T17:56:44Z")
Hi all: Sorry for the weird title. I'm trying to come up with a query solution that gives us both results for an aggregation and certain field of all docs within each bucket, but couldn't find an optimal way. Currently… --- ## [Slice Scroll: Limit maximum results for search result](https://discuss.elastic.co/t/slice-scroll-limit-maximum-results-for-search-result/119526)
**Author:** [@radleta](https://discuss.elastic.co/u/radleta)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 5:49pm UTC](https://discuss.elastic.co/t/slice-scroll-limit-maximum-results-for-search-result/119526 "2018-02-12T17:49:02Z")
I'm trying to use the Slice Scroll approach to parallel pull out a large volume of documents for a search. There does not appear to be a way to tell Elasticsearch to limit the results to the top X number of documents. Th… --- ## [ElasticSearch 6+ Search Fuzzy.. Like...?](https://discuss.elastic.co/t/elasticsearch-6-search-fuzzy-like/119520)
**Author:** [@dojbouli](https://discuss.elastic.co/u/dojbouli)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 5:22pm UTC](https://discuss.elastic.co/t/elasticsearch-6-search-fuzzy-like/119520 "2018-02-12T17:22:58Z")
Hi everbody ! I recently migrate from Elastic Search 1.7 to Elastic Search 6.1 I have a problem for searching items with my queries... I have a basic index : keyword which one is used to store names. (no analyzer sett… --- ## [Watcher - how to write painless script for looping aggregated buckets](https://discuss.elastic.co/t/watcher-how-to-write-painless-script-for-looping-aggregated-buckets/119449)
**Author:** [@surya\_dadi\_dhamarake](https://discuss.elastic.co/u/surya_dadi_dhamarake)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 5:13pm UTC](https://discuss.elastic.co/t/watcher-how-to-write-painless-script-for-looping-aggregated-buckets/119449 "2018-02-12T17:13:09Z")
Hi, I wrote a watcher to query some logs and aggregate using terms aggregations and under terms aggregations I wrote sub aggregation as follows "aggs": { "host\_wise": { "terms": { "field":… --- ## [Why I can't transfer my log to elasticsearch by filebeat?](https://discuss.elastic.co/t/why-i-cant-transfer-my-log-to-elasticsearch-by-filebeat/119488)
**Author:** [@vincnetwang0736](https://discuss.elastic.co/u/vincnetwang0736)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 2:56pm UTC](https://discuss.elastic.co/t/why-i-cant-transfer-my-log-to-elasticsearch-by-filebeat/119488 "2018-02-12T14:56:49Z")
0 down vote favorite I have installed elastciseatch-6.1.1,logstash-6.1.1 on server and filebeat-6.1.1. My web server on client is nginx.And I saved my log files at path likes "/usr/local/nginx/xxxx.xx/uploads/logs" a… --- ## [Find best solution using query string query](https://discuss.elastic.co/t/find-best-solution-using-query-string-query/119474)
**Author:** [@Hayk\_Hovhanisyan](https://discuss.elastic.co/u/Hayk_Hovhanisyan)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 1:31pm UTC](https://discuss.elastic.co/t/find-best-solution-using-query-string-query/119474 "2018-02-12T13:31:38Z")
ElasticSearch "2.4.4" Java "1.8.0\_151" Hi there, I am using query string query, and I need to have matching: User Inputs: O Brien O'Brien OBrien Obri brie brien these should all find "O'Brien". Any Idea here? re… --- ## [Elasticsearch 5.6.x - Using \_version in a function score query](https://discuss.elastic.co/t/elasticsearch-5-6-x-using-version-in-a-function-score-query/119045)
**Author:** [@ng.software.dev](https://discuss.elastic.co/u/ng.software.dev)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 1:36pm UTC](https://discuss.elastic.co/t/elasticsearch-5-6-x-using-version-in-a-function-score-query/119045 "2018-02-12T13:36:08Z")
I have a use case where I want to find the most popular shingles from a text corpus. I made a first implementation some time ago in Elasticsearch 2.3.1. I would extract shingles from the text and index them in Elasticse… --- ## [Raid 0 with replication vs Raid 1 with no replication](https://discuss.elastic.co/t/raid-0-with-replication-vs-raid-1-with-no-replication/119426)
**Author:** [@bluishy](https://discuss.elastic.co/u/bluishy)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 12:36pm UTC](https://discuss.elastic.co/t/raid-0-with-replication-vs-raid-1-with-no-replication/119426 "2018-02-12T12:36:42Z")
Hi, I'm elasticsearch starter! I have a curious about performance between hardware spec + elasticsearch setting. HDD raid 0 set, replicas=1 HDD raid 1 set, replicas=0 Which is the better to use elasticsearch ? (if di… --- ## [Indices, scroll API, and Sorting related questions](https://discuss.elastic.co/t/indices-scroll-api-and-sorting-related-questions/119463)
**Author:** [@Hassan\_Shaitou](https://discuss.elastic.co/u/Hassan_Shaitou)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 12:33pm UTC](https://discuss.elastic.co/t/indices-scroll-api-and-sorting-related-questions/119463 "2018-02-12T12:33:45Z")
I- Regarding indices: 1- Why we can't create two different document types for the same index? 2- Will creating 500 index for example affect the performance of elastic? II- Regarding Scroll API: 1- I want to extract a… --- ## [Optimization: fetching documents as per geo distance](https://discuss.elastic.co/t/optimization-fetching-documents-as-per-geo-distance/119251)
**Author:** [@bhagat95](https://discuss.elastic.co/u/bhagat95)\ **Replies:** 0\ **Last updated:** [February 9, 2018, 2:14pm UTC](https://discuss.elastic.co/t/optimization-fetching-documents-as-per-geo-distance/119251 "2018-02-09T14:14:23Z")
I need to fetch list of stocks sorted by a sort\_score in buckets of 10x km distance from a given location. 1 : \[0-10\] km 2 : \[10-20\] km 3 : \[20-30\] km . . Stocks in bucket p should appear before bucket q for all p\ **Author:** [@jchannon](https://discuss.elastic.co/u/jchannon)\ **Replies:** 13\ **Last updated:** [February 12, 2018, 11:40am UTC](https://discuss.elastic.co/t/mapping-ldap-groups-to-roles/118073 "2018-02-12T11:40:55Z") I have the below ldap config in elasticsearch.yml xpack: security: authc: realms: ldap1: type: ldap url: "ldap://ldap:389" bind\_dn: "cn=admin,dc=vqcomms" bind\_… --- ## [Unable to start Elasticsearch 6.1.1 while configuring lang-groovy plugin](https://discuss.elastic.co/t/unable-to-start-elasticsearch-6-1-1-while-configuring-lang-groovy-plugin/119455)
**Author:** [@rakhirajpoot18](https://discuss.elastic.co/u/rakhirajpoot18)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 11:27am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-6-1-1-while-configuring-lang-groovy-plugin/119455 "2018-02-12T11:27:55Z")
description=lang-groovy Plugin version=2.4.5 name=lang-groovy elasticsearch.version=6.1.1 java.version=1.8 classname=org.elasticsearch.script.groovy.GroovyPlugin --- ## [OneNode: Number of Shards](https://discuss.elastic.co/t/onenode-number-of-shards/119450)
**Author:** [@cdra](https://discuss.elastic.co/u/cdra)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 10:51am UTC](https://discuss.elastic.co/t/onenode-number-of-shards/119450 "2018-02-12T10:51:53Z")
We've deployed a one node cluster. We'll use logstash only to capture syslog events from 100 devices and windows events from 150 computers aprox. I think 1 shard is enough....not ?? how could i change it ?? My default i… --- ## [Doubts regarding ES](https://discuss.elastic.co/t/doubts-regarding-es/119447)
**Author:** [@madhur\_yadav](https://discuss.elastic.co/u/madhur_yadav)\ **Replies:** 0\ **Last updated:** [February 12, 2018, 10:09am UTC](https://discuss.elastic.co/t/doubts-regarding-es/119447 "2018-02-12T10:09:43Z")
Hi there, :slight\_smile: I have a product (version 1) using ES. This product has been deployed on my customers. Now for the version 2 of my product, I'm making certain changes regarding ES and I have some doubts. ES… --- ## [Add new node to cluster (shard allocation)](https://discuss.elastic.co/t/add-new-node-to-cluster-shard-allocation/119439)
**Author:** [@cdra](https://discuss.elastic.co/u/cdra)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 9:56am UTC](https://discuss.elastic.co/t/add-new-node-to-cluster-shard-allocation/119439 "2018-02-12T09:56:52Z")
We have a simple cluster with one node. For each index we have 5 primary shards no replicas... I we add a second node...does elasticsearch move shard to this second node or only créate 5 replicas in it ??? --- ## [Query to find requests that don't have a matching response](https://discuss.elastic.co/t/query-to-find-requests-that-dont-have-a-matching-response/119417)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 9:20am UTC](https://discuss.elastic.co/t/query-to-find-requests-that-dont-have-a-matching-response/119417 "2018-02-12T09:20:36Z")
Hi, Would like to know if there is a way to write a query that finds out for which all request events, the corresponding response event was missing. For e.g. In case of below data: PUT test-index/test/\_bulk?refresh … --- ## [Creating and Deleting Indexes || Watcher](https://discuss.elastic.co/t/creating-and-deleting-indexes-watcher/119275)
**Author:** [@mpandey](https://discuss.elastic.co/u/mpandey)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 9:04am UTC](https://discuss.elastic.co/t/creating-and-deleting-indexes-watcher/119275 "2018-02-12T09:04:24Z")
Hi Everyone, I am working on purging the old data in elasticsearch. I was wondering what is the best way to implement such a job. I have to delete all the documents which are older than 3 months and this has to repeated… --- ## [Elasticsearch doesn't start anymore after x-pack settings](https://discuss.elastic.co/t/elasticsearch-doesnt-start-anymore-after-x-pack-settings/119200)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 4\ **Last updated:** [February 12, 2018, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-anymore-after-x-pack-settings/119200 "2018-02-12T08:53:41Z")
Hello, I try to install X-pack in Elasticsearch following this link : Configure TLS | Elasticsearch Guide \[8.11\] | Elastic When I add these 5 lines (See photo) to my elasticsearch.yml configuration file, elasticsearch c… --- ## [Problems with synonyms in Elastic 6.2](https://discuss.elastic.co/t/problems-with-synonyms-in-elastic-6-2/118820)
**Author:** [@Karolinebryn](https://discuss.elastic.co/u/Karolinebryn)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 8:49am UTC](https://discuss.elastic.co/t/problems-with-synonyms-in-elastic-6-2/118820 "2018-02-12T08:49:38Z")
I have an index in ES 5.6 that I want to move to ES 6.2, but I have some problems when trying to create this index in ES 6.2. { "error": { "root\_cause": \[ { "type": "illegal\_argument\_exception", … --- ## [EsRejectedExecutionException - Index listing query timeout](https://discuss.elastic.co/t/esrejectedexecutionexception-index-listing-query-timeout/119258)
**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\ **Replies:** 0\ **Last updated:** [February 9, 2018, 2:43pm UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-index-listing-query-timeout/119258 "2018-02-09T14:43:53Z")
Hello, I have three nodes on which I have metricbeat installed. In addition, on one of these nodes I have elasticsearch (6.1.1) and kibana receiving the collected measures. After restarting the metricbeat instance on on… [Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1790) [Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1792)